Suspicious activity

Anomaly detection: Role created unusual amount of instances with gpu

Risk Level

Hazardous (3)



Unlike in the past, the role started creating new instances with GPU processor in an amount which is unusual to its usage profile. It is possible that the role was used to create instances for malicious purposes, such as crypto mining.
  • Recommended Mitigation

    It is recommended to review the relevant CloudTrail events and principals that issued this API calls and the instances that were created.